Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/UESmfm3KjybDK_FuopVHDEvat04.roa (download)

Subject key identifier:   50:44:A6:7E:6D:CA:8F:26:C3:2B:F1:6E:A2:95:47:0C:4B:DA:B7:4E 
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
asID:                     AS0
Prefixes:
    1: 2a0c:9a44:cf::/48 (max: 48)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/UESmfm3KjybDK_FuopVHDEvat04.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 144506742 (0x89cff76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
        Validity
            Not Before: Jan  1 05:05:47 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=5044a67e6dca8f26c32bf16ea295470c4bdab74e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:24:f4:22:5d:25:56:06:f7:25:82:7d:3d:81:
                    20:53:bf:25:e1:3c:1a:df:04:d0:99:2a:0d:89:f0:
                    8b:92:0f:b6:68:e5:7c:49:e9:7c:33:e5:b6:d6:ed:
                    d1:d1:ac:ca:55:58:fd:64:e8:1a:1e:9e:4e:bd:39:
                    23:7b:06:4d:7b:20:23:95:be:e4:81:da:6e:2d:be:
                    85:ee:67:0a:81:be:0e:62:64:5a:66:01:c5:4a:00:
                    51:25:78:a2:26:b0:61:f3:57:be:0f:da:42:2a:ba:
                    af:d2:e6:9c:fc:9d:82:1c:73:16:53:ec:2b:ff:71:
                    57:c9:89:3a:1c:78:dd:1a:1a:d6:97:38:bf:68:af:
                    c4:3d:84:1d:b0:80:48:3a:11:c0:cb:81:85:cc:9b:
                    6a:fa:7f:3b:b4:2e:3c:de:2d:70:7c:1c:e3:0d:cb:
                    6a:ff:41:4e:bd:e4:8e:0c:6d:59:9e:f2:1e:f7:4e:
                    5a:0a:15:c2:10:db:af:37:9f:a0:b2:35:e0:0d:3b:
                    4c:55:59:fa:b9:95:93:49:f0:9a:8e:e5:44:ba:c2:
                    4a:5b:86:68:0d:3c:68:88:86:ae:95:3e:4b:01:22:
                    f5:ad:98:9d:4b:a0:b9:1d:ce:20:82:48:c7:3b:e4:
                    28:4d:f3:82:8b:16:64:ab:eb:7b:a3:66:e9:32:c4:
                    cf:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                50:44:A6:7E:6D:CA:8F:26:C3:2B:F1:6E:A2:95:47:0C:4B:DA:B7:4E
            X509v3 Authority Key Identifier: 
                keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/UESmfm3KjybDK_FuopVHDEvat04.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0....*..D..
    Signature Algorithm: sha256WithRSAEncryption
         27:cf:8d:53:57:a0:f0:e2:52:d4:04:5a:82:79:20:e9:99:88:
         44:de:ad:24:ed:70:7e:d2:16:fb:da:2c:73:92:ac:c8:ac:c5:
         8b:cc:9f:d4:c6:db:ed:df:06:41:2a:3e:d7:a4:d7:21:6a:c3:
         07:85:75:88:08:0b:b0:40:0c:ce:39:56:32:a9:e5:31:81:6c:
         55:4d:bc:3f:7b:da:93:42:2f:07:28:e2:8e:d7:13:3c:6b:05:
         74:62:2e:61:4b:aa:55:27:26:6d:68:59:f8:27:01:bc:b4:e5:
         0e:1d:7e:a4:c4:01:dd:00:5e:cd:8d:ec:98:13:58:85:8f:1d:
         aa:74:5f:e9:4d:2e:0b:75:09:4d:bc:87:89:b7:40:f8:7f:e9:
         1d:df:af:ee:9f:53:fe:0d:9e:a1:de:7a:60:d2:00:70:c9:ff:
         a0:a6:3f:b1:58:ae:3a:78:fe:21:d9:0d:40:71:bb:db:cb:30:
         05:43:f2:7d:55:0e:80:5e:24:5d:e3:6f:fd:c8:9e:62:4a:10:
         e6:d8:47:6e:b7:ec:39:76:df:da:2e:81:66:08:f7:7a:ea:10:
         62:e1:be:25:71:0a:4a:3b:b8:d5:5a:db:ef:2f:6b:46:8f:22:
         ac:7e:52:e2:53:00:53:07:41:fb:2f:98:0c:8b:2b:a6:d6:9a:
         50:4d:4e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Wed Jun 16 07:52:07 2021 by LibreSSL & rpki-client.